When ordering a domain XXXX.com
someone can easily change the hidden domain field ( Using Chrome Inspect Element ) in the Config form to another domain name and extension and order the domain XXXX.io for the same price of XXXXX.com in LogicBoxes or any other registrar that supports both.
Is it possible to encrypt or make these hidden fields session only?